Menu

Category Archives: Security

Articles about security

Extra Bacon? Yes please, even though the Cisco bug of this name is bad for you

Risk Level: Very Low. Type: Trojan.

Risk Level: Very Low. Type: Trojan.

Google swats Nexus 5X vulnerable fastboot memory dump flaw
Hacked BitcoinTalk.org Forum Database Goes for Sale on Dark Web
It’s 2016, and anti-virus products still goof up like this…
Phishing and data theft await users due to target=”_blank” vulnerability
Hacker Selling 68 Million Stolen Dropbox User Accounts on Dark Web
OurMine Hacks Variety Website; Sends Fake Emails to Readers
Firm loses $44m due to an online email scam

Risk Level: Very Low.

Man who hacked Kernel.org, Linux Foundation in 2011 Arrested
Azerbaijani hackers leak secret data from Armenian Intel server
BBC mistakenly sent news alert in Bengali; Readers took it as a hack
Linux Foundation Restructuring CII Security Effort for Scale

Discovered: September 2, 2016 Updated: September 3, 2016 12:00:55 AM Type: Trojan Systems Affected: Windows 2000, Windows 7, Windows 8, Windows 95, Windows 98, Windows Me, Windows NT, Windows Server 2003, Windows Server 2008, Windows Vista, Windows XP Ransom.Fsociety is a Trojan horse that encrypts files on the compromised computer and asks the user to […]

BASHLITE malware turning millions of Linux Based IoT Devices into DDoS botnet

European Company Loses Millions in Targeted Phishing Scam In the last couple weeks, Leoni AG, one of the largest electrical wiring companies in Europe fell victim to a Business Email Compromise (BEC) scam involving the CFO transferring a significant sum of money to a non-verified bank account. This location was likely the main target due […]

Hanno Boeck discovered multiple vulnerabilities in libidn, the GNU library for Internationalized Domain Names (IDNs), allowing a remote attacker to cause a denial of service against an application using the libidn library (application crash). For the stable distribution (jessie), these problems have been fixed in version 1.29-1+deb8u2. For the testing distribution (stretch), these problems have […]

Microsoft Adds .NET Core, ASP.NET to Bug Bounty Program
Google patches critical bug on Android Nexus 5X devices
Bloke accused of Linux kernel.org hack nabbed during traffic stop
NBA’s Golden State Warriors sued for ‘mic snooping’ mobile app
Online Music Database Last.fm Hacked; 43M accounts Leaked

Debian: 3658-1: libidn: Summary Posted by Anthony Pell    Security Report Summary – ————————————————————————- Debian Security Advisory DSA-3658-1 security@debian.org https://www.debian.org/security/ Salvatore Bonaccorso September 01, 2016 https://www.debian.org/security/faq – ————————————————————————- Package : libidn CVE ID : CVE-2015-8948 CVE-2016-6261 CVE-2016-6263 Hanno Boeck discovered multiple vulnerabilities in libidn, the GNU library for Internationalized Domain Names (IDNs), allowing a remote […]

Red Hat: 2016:1797-01: ipa: Moderate Advisory Posted by Anthony Pell    An update for ipa is now available for Red Hat Enterprise Linux 6 and Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact [More…] ===================================================================== Red Hat Security Advisory Synopsis: Moderate: ipa security update Advisory […]

Hacking mobile login tokens tricky but doable, says reverse-engineer
Android Patch Fixes Nexus 5X Critical Vulnerability
Two Crypto-currency Websites Suffered Huge Data Breaches
Microsoft bug bounty program adds .Net Core and ASP.Net Core
Apple quashes 3 zero-days with emergency Mac update
Apple Patches Trident Vulnerabilities in OS X, Safari
Azerbaijani hacktivists leak Armenian security service docs
CEO fraud: How to stay protected against this modern day deception

So, you’re minding your own business working through your day-to-day battle of never-ending emails and sorting through all the stuff you should have finished yesterday. Suddenly, an urgent email drops into your inbox from the boss, asking for an urgent transfer of £8,000 to a designated bank account. It’s not overly unusual: it’s from the […]

Threatpost News Wrap, September 2, 2016
Kaspersky ‘terminates’ deal with security reseller Quadsys
Regular password changes make things worse
18 years of Googling: Malware can still be just one click away

How do you navigate through virtual reality? What is the first webpage you open when you are looking for something online? Where do you go to answer a ‘how to’ question most often? For the majority of users, the answer would be Google. It’s been 18 years since Stanford PhD students Larry Page and Sergey […]

Mac users vulnerable to state-sponsored Trident attack, fixed in iOS last week. Patch now
Adobe ices ColdFusion server admin password, file hack hole
Lightspeed PoS vendor breached, sensitive database tapped
Google crushes 33 Chrome bugs, pays boffins more than $56k
Patch now: Apple emits fix for Pegasus spyware bugs in OS X, Safari

Discovered: September 1, 2016 Updated: September 2, 2016 12:02:36 PM Type: Trojan Infection Length: 3,921,408 bytes Systems Affected: Windows 2000, Windows 7, Windows 8, Windows 95, Windows 98, Windows Me, Windows NT, Windows Server 2003, Windows Server 2008, Windows Vista, Windows XP Ransom.Serpico is a Trojan horse that encrypts files on the compromised computer and […]

How much does your kid hate exams? This lad hacked his government to skip them
Did you stay at any of these 60 Kimpton hotels? Whelp, hackers have your card details
Romanian hacker Guccifer sentenced to 52 months in U.S. prison
George W Bush hacker Guccifer to spend 52 months in the big house
Malvertising Campaign Pushing Neutrino Exploit Kit Shut Down

Slackware: 2016-244-01: mozilla-thunderbird: Security Update Posted by Anthony Pell    New mozilla-thunderbird packages are available for Slackware 14.1, 14.2, and -current to fix security issues. [More Info…] [slackware-security] mozilla-thunderbird (SSA:2016-244-01) New mozilla-thunderbird packages are available for Slackware 14.1, 14.2, and -current to fix security issues. Here are the details from the Slackware 14.2 ChangeLog: +————————–+ […]

Guccifer hacker jailed for four years by Virginia court
Insecure Redis Instances at Core of Attacks Against Linux Servers
DressCode? More like code for an Android botnet…
Transmission hijacked to broadcast Mac malware
Financial cybersecurity ‘needs to be a key agenda item at G20’

Improving financial cybersecurity at an international level must be a key agenda item at the G20 Summit in China this month (September 4th-5th). This is according to a group of prominent US senators, who have urged president Barack Obama to raise this critical issue at the event. In a letter to the White House, Gary […]

Chrome 53 Fixes Address Spoofing Vulnerability, 32 Other Bugs
‘Identity and access management solution without compromise’ is compromised
Patched ColdFusion Flaw Exposes Applications to Attack
How one company lost $44 million through an email scam
The Dropbox data breach is a warning to update other passwords
SWIFT Warns Banks Of More Cyberattacks
How to turn on HTTPS company-wide in one swoop
Healthcare and local gov are most likely UK bodies to suffer infosec breaches
VMworld: Can you trust your API?

The VMware ecosystem has become huge and now encompasses a daunting number of platforms that you don’t even think about, including many in the IoT world. But now, all of these devices have to talk to each other in order to get along, and they do that with Application Program Interfaces (API). Are APIs all […]

OS X malware spread via signed Transmission app… again
Cisco SOHO switches patched for SOHOpeless vuln
Blackhat wannabes proffer probably bogus Linux scamsomware
L0phtCrack’s back! Crack hack app whacks Windows 10 trash hashes
MedSec’s ‘hackable pacemaker’ report autopsy: Bombshell crash claim in doubt
FBI Director wants ‘adult conversation’ about backdooring encryption

Hanno Boeck and Marcin Noga discovered multiple vulnerabilities in libarchive; processing malformed archives may result in denial of service or the execution of arbitrary code. For the stable distribution (jessie), these problems have been fixed in version 3.1.2-11+deb8u2. For the testing distribution (stretch), these problems have been fixed in version 3.2.1-1. For the unstable distribution […]

Two vulnerabilities have been discovered in the server for the Tryton application platform, which may result in information disclosure of password hashes or file contents. For the stable distribution (jessie), these problems have been fixed in version 3.4.0-3+deb8u2. For the unstable distribution (sid), these problems have been fixed in version 4.0.4-1. We recommend that you […]

OneLogin SecureNotes Breach Exposed Data in Cleartext
BitTorrent Client ‘Transmission’ Dropping Keydnap Malware on Mac Devices

Red Hat: 2016:1781-01: rh-postgresql94-postgresql: Moderate Advisory Posted by Anthony Pell    An update for rh-postgresql94-postgresql is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact [More…] ===================================================================== Red Hat Security Advisory Synopsis: Moderate: rh-postgresql94-postgresql security update Advisory ID: RHSA-2016:1781-01 Product: Red Hat Software Collections […]

Debian: 3657-1: libarchive: Summary Posted by Anthony Pell    Security Report Summary – ————————————————————————- Debian Security Advisory DSA-3657-1 security@debian.org https://www.debian.org/security/ Moritz Muehlenhoff August 30, 2016 https://www.debian.org/security/faq – ————————————————————————- Package : libarchive CVE ID : CVE-2015-8916 CVE-2015-8917 CVE-2015-8919 CVE-2015-8920 CVE-2015-8921 CVE-2015-8922 CVE-2015-8923 CVE-2015-8925 CVE-2015-8926 CVE-2015-8928 CVE-2015-8930 CVE-2015-8931 CVE-2015-8932 CVE-2015-8933 CVE-2015-8934 CVE-2016-4300 CVE-2016-4302 CVE-2016-4809 CVE-2016-5844 Hanno Boeck […]

Debian: 3656-1: tryton-server: Summary Posted by Anthony Pell    Security Report Summary – ————————————————————————- Debian Security Advisory DSA-3656-1 security@debian.org https://www.debian.org/security/ Moritz Muehlenhoff August 30, 2016 https://www.debian.org/security/faq – ————————————————————————- Package : tryton-server CVE ID : CVE-2016-1241 CVE-2016-1242 Two vulnerabilities have been discovered in the server for the Tryton application platform, which may result in information disclosure […]

Ubuntu: 3070-2: Linux kernel (Raspberry Pi 2) vulnerabilities Posted by Anthony Pell    Several security issues were fixed in the kernel. ========================================================================== Ubuntu Security Notice USN-3070-2 August 30, 2016 linux-raspi2 vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: – Ubuntu 16.04 LTS Summary: Several security issues were fixed in the […]

Dropbox changes passwords after 68M account records were compromised

Risk Level: Very Low. Type: Trojan.

Discovered: August 30, 2016 Updated: August 30, 2016 10:15:13 PM Type: Trojan Systems Affected: Windows 2000, Windows 7, Windows 8, Windows 95, Windows 98, Windows Me, Windows NT, Windows Server 2003, Windows Server 2008, Windows Vista, Windows XP Trojan.Atmoripper is a Trojan horse for Automatic Teller Machines (ATMs) that allows an attacker to issue commands […]

Top 5 threats for online gamers and how to avoid them

We all know how much you enjoy playing – socially, professionally or casually – video games, which is why we want to take this opportunity to share more information about safe online gaming. Previously we have discussed how to protect yourself while playing, with professional online gamers offering advice based on their knowledge and experience as […]

Researchers: MedSec, Muddy Waters Set Bad Precedent With St. Jude Medical Short
68 Million Credentials Spilled in 2012 Dropbox Hack
Fairware Attacks Targeting Linux Servers
Adobe patches critical vulnerability in ColdFusion application server
Hackers Stole 68M Dropbox Passwords (Change yours now)
Millions of Dropbox users are being advised to change their passwords
How to keep viral memes from spreading malware in your enterprise
BitTorrent client is found distributing Mac-based malware
Review: SentinelOne blocks and dissects threats
I went on holiday. Hackers didn’t.
Angler’s obituary: Super exploit kit was the work of Russia’s Lurk group
HPE yawns, stretches, and patches January OpenSSH bug in virtual access products
More banks plundered through SWIFT attacks
Dropbox: Leaked DB of 68 million account passwords is real
USBee stings air-gapped PCs: Wirelessly leak secrets with a file write
OneLogin breached, hacker finds cleartext credential notepads

Risk Level: Very Low. Type: Trojan.

Risk Level: Very Low. Type: Trojan.